Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins (such as the global configuration and jobs) can appear as nested field values in user-submitted `config.xml` documents and subsequently handle HTTP requests via Stapler, resulting in remote code execution.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-09-03 | 2 | Disclosure2 |
| 2026-09-07 | 1 | Patch1 |
CVE-2026-84645: RCE in Jenkins, 8.8 rating 🔥 Jenkins disclosed numerous vulnerabilities in its security advisory. The most dangerous one allows remote code execution through unsafe deserialization. 👉 https://nt.ls/7bpLG
Post summary
Jenkins has announced a new CVE (CVE-2026-84645) that enables remote code execution via unsafe deserialization, rated 8.8 on the severity scale.
【重要】JenkinsにCVSS 8.8、RCE脆弱性を修正 https://www.cybernote.click/2026/09/06/jenkins-cve-2026-84645-deserialization-rce/ #IT #Security #cybersecurity
Post summary
The post announces that a CVSS 8.8 RCE vulnerability in Jenkins (cve-2026-84645) has been fixed, providing a link for further details.
🚨High - Jenkins Stapler config.xml Nested Object RCE (CVE-2026-84645) In Jenkins core, objects backed by independent top-level config files can be smuggled as nested fields inside user-submitted config.xml, then exposed to Stapler request handling. An attacker who can submit/modify config.xml can trigger unsafe request routing to reach code paths leading to RCE. 👉Affected: Jenkins <= 2.579 and LTS <= 2.568.2
Post summary
The post announces a high‑severity CVE‑2026‑84645 that allows remote code execution through nested objects in Jenkins config.xml.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jenkins | jenkins | - | - | - |
| App | jenkins | jenkins | - | - | - |